Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
File:                     5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json)
Hash identifier:          eDnmaxWgSqkfC2BnU/r9H62Nctx6R7sZbfuzQPbteVA=
Subject key identifier:   46:4F:81:0D:DF:45:48:5A:6A:A4:B4:5D:35:6D:D2:D1:7D:10:80:08
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584A9900C89C507EA95BC6B2E080
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     5645
IP address blocks:        198.84.128.0/17 maxlen: 17
                          198.84.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c8:9c:50:7e:a9:5b:c6:b2:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=07460bb4-a7ee-4cce-99a4-b833956dc3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:a2:67:86:1c:3a:4d:93:34:64:2a:2e:2c:
                    a5:79:6a:69:97:ed:ca:40:aa:ad:df:5f:12:9e:b6:
                    07:85:6f:f4:b7:71:0c:4b:74:09:38:bb:a2:c6:19:
                    2b:86:f3:35:da:60:3a:ac:52:26:c6:04:3c:46:ce:
                    96:92:a2:ec:e0:0c:31:09:60:8e:2c:36:8a:ad:a0:
                    43:80:7f:e2:89:9b:89:74:1c:48:aa:08:ea:ed:0a:
                    be:44:fe:cf:fc:79:e5:71:cc:b0:64:c3:1e:ab:c1:
                    54:44:ec:74:41:ff:f8:13:dc:df:cd:11:eb:fd:35:
                    1a:0e:39:db:9f:cc:f3:25:05:6e:2b:2b:43:e4:d9:
                    d7:c4:92:58:03:8e:f7:51:f1:4c:07:7a:dd:3b:c3:
                    87:b8:6f:dd:80:61:b3:8f:ae:99:14:82:ea:1a:a2:
                    67:45:9c:bb:c8:f1:9f:32:b7:8b:04:51:1c:0a:d4:
                    b6:4d:98:fb:76:ef:a6:33:5b:dc:40:9e:9b:fe:82:
                    ab:a7:1b:53:e0:41:3e:ad:4b:da:ee:f9:23:ea:c2:
                    3e:7b:4d:72:9c:fa:bf:e1:68:4e:21:82:7d:7f:8f:
                    f0:38:91:26:36:23:da:68:71:45:e6:c8:6c:8b:8a:
                    7a:20:21:c0:25:f7:40:ed:33:b9:0c:cd:45:3e:16:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4F:81:0D:DF:45:48:5A:6A:A4:B4:5D:35:6D:D2:D1:7D:10:80:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:17:0f:af:8d:a6:4d:2b:15:26:fd:a5:3d:ce:55:04:77:59:
         fb:c2:6f:2c:00:60:ee:c2:c4:28:4f:ac:33:ca:d7:bd:3c:e8:
         72:96:9f:3b:38:70:5b:98:69:61:57:a6:4f:3a:46:67:97:5c:
         db:a2:cb:3a:a3:ce:d5:80:1b:65:4e:3b:8b:03:2c:e3:10:11:
         8c:11:6e:6f:c7:fe:22:12:eb:0d:15:58:94:a1:f5:51:7e:41:
         c6:56:44:34:72:7a:2b:e8:e0:c0:0f:49:95:ba:63:5c:cc:79:
         3d:52:e1:41:6e:e8:20:bb:53:c3:d4:44:fc:c2:f0:20:85:cc:
         cb:7a:b8:e0:b9:62:f1:4d:75:4a:5d:1a:44:08:0b:ef:a1:f6:
         6d:4a:d6:88:7a:0f:db:54:91:50:40:b6:42:65:72:59:89:da:
         f9:c9:cf:f8:0f:55:d7:b0:93:94:f3:29:99:02:b9:a5:81:c1:
         6d:5e:5e:86:75:fb:67:8a:88:50:2a:a7:a0:46:c9:05:c5:1c:
         c4:35:94:59:71:b1:c5:53:ba:a4:64:34:ac:71:46:2c:07:91:
         8e:6f:0c:e6:1b:c0:8b:7f:82:b4:e4:54:e7:fc:d7:2d:c8:09:
         6d:14:13:14:c1:79:6e:35:3e:14:eb:ef:57:41:60:3a:2f:ba:
         07:65:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:15 2025 by rpki-client